MolecularFaces before 0.3.0 is vulnerable to cross site scripting. A remote attacker can execute arbitrary JavaScript in the context of a victim browser via crafted molfiles.
References
| Link | Resource |
|---|---|
| https://github.com/advisories/GHSA-2pwh-52h7-7j84 | Third Party Advisory |
| https://github.com/advisories/GHSA-2pwh-52h7-7j84 | Third Party Advisory |
| https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84 | Vendor Advisory |
| https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84 | Vendor Advisory |
| https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84 | Third Party Advisory US Government Resource |
| https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84 | Third Party Advisory US Government Resource |
Configurations
History
26 Jan 2024, 17:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| References | () https://vulncheck.com/advisories/vc-advisory-GHSA-2pwh-52h7-7j84 - Third Party Advisory, US Government Resource | |
| References | () https://github.com/ipb-halle/MolecularFaces/security/advisories/GHSA-2pwh-52h7-7j84 - Vendor Advisory | |
| References | () https://github.com/advisories/GHSA-2pwh-52h7-7j84 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Ipb-halle molecularfaces
Ipb-halle |
|
| CPE | cpe:2.3:a:ipb-halle:molecularfaces:*:*:*:*:*:*:*:* |
19 Jan 2024, 22:52
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-19 21:15
Updated : 2025-05-30 15:15
NVD link : CVE-2024-0758
Mitre link : CVE-2024-0758
JSON object : View
Products Affected
ipb-halle
- molecularfaces
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')